Cybersecurity Analyst Intern

The Opportunity
This is a paid internship. The Cybersecurity Analyst Intern will support the organization's cybersecurity and compliance efforts by assisting in the review, validation, and alignment of IT and cybersecurity policies, procedures, and technical controls. This role works closely with the IT Manager, Cyber Security Director, and IT Operations Lead/ISSO to ensure that documented policies accurately reflect operational practices and that required security controls are properly implemented and functioning.
This internship provides hands-on experience in governance, risk, and compliance (GRC), as well as exposure to real-world cybersecurity operations within a structured enterprise environment.

Key Responsibilities

Policy & Documentation Review

• Assist in reviewing cybersecurity and IT policies, standards, and procedures for accuracy, clarity, and completeness
• Validate that policies align with current operational practices and technologies
• Identify gaps, inconsistencies, or outdated content and recommend updates

Cross-Functional Collaboration

• Work directly with the IT Manager and Cyber Security Director to validate policy intent and business alignment
• Coordinate with the IT Operations ISSO to ensure technical controls support policy requirements
• Control Validation & Compliance Support
• Assist in verifying that required security controls are implemented and functioning as intended
• Support mapping of technical controls to policy requirements and applicable compliance frameworks (e.g., CMMC, NIST, etc.)
• Participate in internal audits, control reviews, and evidence collection

Documentation & Reporting

• Maintain clear documentation of findings, updates, and recommendations
• Help develop reports and summaries for leadership on policy alignment and control effectiveness

Continuous Improvement

• Contribute to improving processes for policy management and control validation
• Stay informed on cybersecurity best practices and emerging standards